Filtering spam with behavioral blacklisting

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2007, Pages 342-351

  Ramachandran, Anirudh ^a   Feamster, Nick ^a   Vempala, Santosh ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

Blacklist; Botnets; Clustering; Security; Spam

Indexed keywords

BOTNETS; CURRENT FILTERING; DATA SETS; EMAIL FILTERING; INACCURATE INFORMATION; IP ADDRESSS; MAIL SERVERS; SINGLE DOMAINS; SPAM FILTER; SPAM FILTERING; SPAMMERS;

CLUSTERING ALGORITHMS; ELECTRONIC MAIL;

INTERNET;

EID: 77952388137     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1315245.1315288     Document Type: Conference Paper

References (42)

1. Spamhaus delisting policy, 2007. http://www.spamhaus.org/sbl/policy.html.
2. M. Abadi, A. Birrell, M. Burrow, F. Dabek, and T. Wobber. Bankable Postage for Network Services. In Proc. Asian Computing Science Conference, Dec. 2003.
3. E. Allman, J. Callas, M. Delany, M. Libbey, J. Fenton, and M. Thomas. DomainKeys Identified Mail (DKIM) Signatures, May 2007. http://www.ietf.org/rfc/ rfc4871.txt.
4. D. S. Anderson, C. Fleizach, S. Savage, and G. M. Voelker. Spamscatter: Characterizing Internet Scam Hosting Infrastructure. In Proc. 16th USENIX Security Symposium, Boston, MA, Aug. 2007.
5. A. Back. Hashcash. http://www.cypherspace.org/adam/hashcash
6. A. Brodsky and D. Brodsky. A Distributed Content Independent Method for Spam Detection. In First USENIX Workshop on Hot Topics in Understanding Botnets (HotBots), Cambridge, MA, Apr. 2007.
7. D. Cheng, R. Kannan, S. Vempala, and G. Wang. A divide-and-merge methodology for clustering. ACM Transactions on Database Systems, 31 (4):1499-1525, 2006.
8. R. Clayton. Stopping Spam by Extrusion Detection. In First Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2004.
9. R. Clayton. Stopping Outgoing Spam by Examining Incoming Server Logs. In Second Conference on Email and Anti-Spam (CEAS), Stanford, CA, July 2005.
10. Cloudmark Authority Anti-Spam. http://www.cloudmark.com/serviceproviders/ authority/spam/, 2007.
11. Commtouch Inc. 2006 Spam Trends Report: Year of the Zombies. http://www.commtouch.com/documents/Commtouch-2006-Spam-Trends-Year-of-the- Zombiespdf.
12. E. Damiani, S. de Vimercati, and P. Samarati. P2P-Based Collaborative Spam Detection and Filtering. In 4th IEEE Conference on P2P, 2004.
13. Z. Duan, K. Gopalan, and X. Yuan. Behavioral Characteristics of Spammers and Their Network Reachability Properties. In Proc. IEEE ICC, Glasgow, Scotland, June 2007.
14. C. Dwork and M. Naor. Pricing via Processing or Combatting Junk Mail. In CRYPTO, Santa Barbara, CA, Aug. 1992.
15. P. Graham. Better Bayesian Filtering. http://www.paulgraham.com/better. html
16. IronPort. http://www.ironport.com/, 2007.
17. IronPort Carrier Grade Email Security Appliance. http://www.ironport.com/ products/ironport-x1000.html, 2007.
18. R. Kannan, S. Vempala, and A. Vetta. On clusterings: good, bad and spectral. J. of the ACM, 51 (3):497-515, 2004.
19. Kelly Jackson Higgins, Dark Reading. Botnets Battle Over Turf. http://www.darkreading.com/document.asp? doc-id=122116, Apr. 2007.
20. J. Kong et al. Scalable and Reliabile Collaborative Spam Filters: Harnessing the Global Socail Email Networks. In 3rd Annual Workshop on the Weblogging Ecosystem, 2006.
21. B. Laurie and R. Clayton. Proof-of-Work Proves Not to Work. In Third Annual Workshop on Economics and Information Security (WEIS), Minneapolis, MN, May 2004.
22. F. Li and M.-H. Hseih. An Empirical Study of Clustering Behavior of Spammers and Group-based Anti-Spam Strategies. In 3rd Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2006.
23. MailAvenger, 2007. http://www.mailavenger.org/.
24. Mail Abuse Prevention System (MAPS). http://www.mail-abuse.com/.
25. Messaging Anti-Abuse Working Group. MAAWG Issues First Global Email Spam Report. http://www.prnewswire.com/cgi-bin/stories.pl?ACCT=104& STORY=/www/story/03-08-2006/0004316196, Mar. 2006.
26. PandaLabs Blog. Zunker Spamming Bot Front-end Analysis. http://blogs.pandasoftware.com/blogs/pandalabs/archive/2007/05/08/Zunker.aspx, May 2007.
27. V Prakash. Vipul's Razor. http://razor.sourceforge. net/, 2007.
28. Pyzor. http://pyzor.sourceforge.net/, 2007.
29. A. Ramachandran, D. Dagon, and N. Feamster. Can DNSBLs Keep Up with Bots? In 3rd Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2006.
30. A. Ramachandran and N. Feamster. Understanding the Network-Level Behavior of Spammers. In Proc. ACM SIGCOMM, Pisa, Italy, Aug. 2006.
31. Secure Computing. http://www.securecomputing.com/, 2007.
32. Secure Computing IronMail. http://www.securecomputing.com/index.cfm?skey= 1612, 2007.
33. A. Sinclair and M. Jerrum. Approximate counting, uniform generation and rapidly mixing markov chains. Information and Computation, 82:93-133, 1989.
34. Spam and Open-Relay Blocking System (SORBS). http://www.sorbs.net/.
35. SpamAssassin, 2007. http://www.spamassassin.org/.
36. SpamCop. http://www.spamcop. net/.
37. Spamhaus, 2007. http://www.spamhaus.org/.
38. SpamHINTS. http://www.spamhints.org/, 2007.
39. Realtime uriblacklist. http://www.uribl.com/.
40. P. Vixie. Distributed Checksum Clearinghouse. http://www.rhyolite.com/ anti-spam/dcc/, 2007.
41. M. Walfish, J. Zamfirescu, H. Balakrishnan, and D. Karger. Distributed quota enforcement for spam control. In Proc. 3rd Symposium on Networked Systems Design and Implementation (NSDI), San Jose, CA, May 2006.
42. M. Wong and W. Schlitt. Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Apr. 2006. RFC 4408.